Andie
Log in

Legal information

Privacy Policy

Rules for processing personal data and using cookies on the andie.app website.

General information

  1. This policy applies to the website operating at the URL: https://andie.app
  2. The operator of the website and the controller of personal data is: ANDIE Prosta Spółka Akcyjna, ul. Henryka Sienkiewicza 85/87 lok. 1, 90-057 Łódź, KRS 0001249721
  3. The operator's contact email address: contact@andie.app
  4. The operator is the controller of your personal data with respect to data provided voluntarily in the Service.
  5. The Service uses personal data for the following purposes:
    • Operating a comment system
    • Operating online chat conversations
    • Handling inquiries via forms
    • Providing ordered services
    • Presenting offers or information
  6. The Service collects information about users and their behaviour in the following ways:
    1. Through data entered voluntarily in forms, which is entered into the Operator's systems.
    2. By storing cookie files (so-called "cookies") on end devices.

Selected data protection methods used by the Operator

  1. Login and personal data entry areas are protected at the transmission layer (SSL certificate). As a result, personal data and login data entered on the site are encrypted on the user's computer and can only be read on the destination server.
  2. Personal data stored in the database is encrypted in such a way that only the Operator holding the key can read it. This protects the data in the event of the database being stolen from the server.
  3. User passwords are stored in hashed form. The hashing function works one-way — it is not possible to reverse its operation, which is the current standard for storing user passwords.
  4. The Operator periodically changes its administrative passwords.
  5. To minimise the risk of unauthorised access to data, the Operator uses complex passwords containing lowercase and uppercase letters, digits and special characters, no shorter than 8 characters.
  6. An important element of data protection is the regular updating of all software used by the Operator to process personal data, which in particular means regular updates of software components.
  7. To protect data, the Operator regularly performs security backups.

Hosting

  1. The Service is hosted (technically maintained) on the server of the operator: DigitalOcean
  2. The hosting company, to ensure technical reliability, maintains logs at the server level. The following may be recorded:
    • resources identified by URL (addresses of requested resources — pages, files),
    • time the request was received,
    • time the response was sent,
    • client station name — identification performed via the HTTP protocol,
    • information about errors that occurred during HTTP transaction processing,
    • URL of the page previously visited by the user (referrer link) — where access to the Service occurred via a link,
    • information about the user's browser,
    • IP address information,
    • diagnostic information related to the process of independently ordering services via registrars on the site,
    • information related to handling email directed to the Operator and sent by the Operator.

Your rights and additional information on how data is used

  1. In certain situations, the Administrator has the right to transfer your personal data to other recipients if this is necessary to perform the contract with you or to fulfil obligations incumbent on the Administrator. This applies to the following groups of recipients:
    • hosting company on an entrustment basis
    • law firms and debt collection agencies
    • payment operators
    • authorised employees and collaborators who use the data to achieve the purpose of the website's operation
  2. Your personal data is processed by the Administrator no longer than is necessary to perform activities related to them specified in separate regulations (e.g. on accounting). With regard to marketing data, data will not be processed for longer than 3 years.
  3. You have the right to request from the Administrator:
    • access to your personal data,
    • rectification,
    • erasure,
    • restriction of processing,
    • and data portability.
  4. You have the right to object to the processing of personal data for the purpose of pursuing the Administrator's legitimate interests, including profiling, provided that the right to object cannot be exercised where there are compelling legitimate grounds for processing that override your interests, rights and freedoms, in particular for the establishment, exercise or defence of legal claims.
  5. Complaints against the Administrator's actions may be lodged with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa.
  6. Providing personal data is voluntary, but necessary to use the Service.
  7. Automated decision-making, including profiling, may be applied to you for the purpose of providing services under the concluded contract and for the Administrator's direct marketing.
  8. Personal data is not transferred to third countries within the meaning of personal data protection regulations. This means we do not send it outside the European Union.

Information in forms

  1. The Service collects information provided voluntarily by the user, including personal data, if provided.
  2. The Service may record information about connection parameters (timestamp, IP address).
  3. In some cases, the Service may record information facilitating the association of form data with the email address of the user completing the form. In such a case, the user's email address appears within the URL of the page containing the form.
  4. Data provided in the form is processed for the purpose arising from the function of the specific form, e.g. to handle a service request or business contact, service registration, etc. Each time, the context and description of the form clearly inform what it is used for.

Administrator logs

  1. Information about user behaviour in the service may be subject to logging. This data is used for administering the service.

Important marketing techniques

  1. The Operator uses statistical analysis of traffic on the site via Google Analytics (Google Inc. based in the USA). The Operator does not transfer personal data to the provider of this service, only anonymised information. The service is based on the use of cookies on the user's end device. With regard to information about user preferences collected by the Google advertising network, the user can view and edit information resulting from cookie files using the tool: Google Ads Preferences.

Information about cookies

  1. The Service uses cookies.
  2. Cookies (so-called "cookies") are IT data, in particular text files, which are stored on the end device of the Service User and are intended for use with the Service's web pages. Cookies usually contain the name of the website from which they originate, the time they are stored on the end device and a unique number.
  3. The entity placing cookies on the end device of the Service User and obtaining access to them is the operator of the Service.
  4. Cookies are used for the following purposes:
    1. maintaining the Service User's session (after login), so that the user does not have to re-enter login and password on every subpage of the Service;
    2. achieving the purposes specified above in the "Important marketing techniques" section;
  5. Two basic types of cookies are used within the Service: "session" cookies and "persistent" cookies. "Session" cookies are temporary files stored on the User's end device until logout, leaving the website or closing the software (web browser). "Persistent" cookies are stored on the User's end device for the time specified in the cookie parameters or until deleted by the User.
  6. Web browsing software (web browser) usually allows cookies to be stored on the User's end device by default. Service Users may change settings in this regard. The web browser allows cookies to be deleted. Automatic blocking of cookies is also possible. Detailed information on this topic is contained in the help or documentation of the web browser.
  7. Restrictions on the use of cookies may affect some functionalities available on the Service's web pages.
  8. Cookies placed on the end device of the Service User may also be used by entities cooperating with the operator of the Service, in particular: Google (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA), Twitter (Twitter Inc. based in the USA).

Managing cookies – how to give and withdraw consent in practice?

  1. If the user does not want to receive cookies, they can change browser settings. Please note that disabling cookies necessary for authentication, security and maintaining user preferences may make it difficult and, in extreme cases, may prevent use of websites.
  2. To manage cookie settings, select the web browser you use from the list below and follow the instructions:

    Mobile devices:

Last updated: August 13, 2026